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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace ail prior versions, and listings, of claims in the 

application: 

1 . (currently amended) Apparatus for processing data, said apparatus comprising: 
a processor operable in a plurality of modes and a plurality of domains, said plurality of 

domains comprising a secure domain and a non-secure domain, said plurality of modes 
including: 

at least one secure mode being a mode in said secure domain; and 
at least one non-secure mode being a mode in said non-secure domain; 
wherein when said processor is executing a program in a secure mode said program has 
access to secure data which is not accessible when said processor is operating in a non-secure 

mode; 

said processor is responsive to one or more exception conditions for triggering exception 
processing; and 

said processor beiag-is responsive to eftg-etH-tteFe -phiral programmable p arameters stored 
in ai;>mgfaj B.niabl<> -an exception trap mask register, each of said e iie - or ' ii^t efe-p [iiral 
programmable p arameters re spectively specifyins wfeeh-ef^M -whetlier a corres p ondin g 
e? £eeptiens exception should be handled by a secure mode exception handler executing in a 
secure mode and w hic h of said exceptioii^ -OLshould be handled by an exception handler 
executing in a mode within a current one of said secure domain and said non-secure domain 
when that exception occurs. 

2. Canceled. 
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3. (previously presented) The apparatus as claimed in claim 1, wherein said 
exception trap mask register is writable when said processor is in a secure mode and said 
exception trap mask register is non-writable when said processor is in a non-secure mode. 

4. (previously presented) The apparatus as claimed in claim 1 , further comprising a 

configuration controlling coprocessor associated with said processor and wherein said exception 
trap mask register is a register within said configuration controlling coprocessor. 

5 . (previously presented) The apparatus as claimed in claim 1 , wherein at le^t one 
of said parameters is a signal value provided at a hardware input to said processor. 

6. (previously presented) The apparatus as claimed in claim 1, wherein said secure 
exception handler is part of a secure operating system operable in said secure mode. 

7. (previously presented) The apparatus as claimed in claim 1 , wherein said non- 
secure exception handler is pait of a non-secure operating system operable in said non-secure 
mode. 

8. (previously presented) The apparatus as claimed in claim 1 , wherein said 
processor is also operable in a monitor mode and any switching between a secure mode and a 
non-secure mode required for handling of an exception as specified by said parameters takes 
place via said monitor mode, said processor being operable at least partially in said monitor 



-3- 



1261119 



WATT et al. 

Appl. No. 10/714,565 

October 18, 2007 

mode to execute a monitor program to manage switching between said secure mode and said 
non-secure mode. 

9. (previously presented) The apparatus as claimed in claim 8, wherein said monitor 
program may change said parameters to determine where an exception should be handled. 

1 0. (previously presented) The apparatus as claimed in claim 8, wherein said 
processor includes a register bank and said monitor program is operable when executed by said 
processor to flush at least a portion of said register bank shared between said secure mode and 
said non-secure mode when switching from said secure mode to said non-secure mode such that 
no secure data held within said register bank may pass from said secure mode to said non-secure 
mode other than as permitted by said monitor program. 

1 1 . (currently amended) A method of controlling exception processing of a 
processor, said method comprising: 

executing a program with said processor configured to operate in a plurality of modes and 
a plurality of domains, said plurality of domains comprising a secure domain or a non-secure 
domain, said plurality of modes including: 

at least one secure mode being a mode in said secure domain; and 

at least one non-secure mode being a mode in said non-secure domain; 

wherein when said processor is executing a program in a secure mode, said program has 
access to secure data which is not accessible when said processor is operating in a non-secure 
mode; 
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in response to one or more exception conditions, triggering exception processing using an 
exception handler; 

wherein said processor selects an exception handler in response to eBe-ef-Bior-e-iplural 
programm able parameters stored in a-preffla fnmable an exception trap mask register, each of said 
t>H^-OF-rFner-& -plural programmable p arameters respectively specifying wht& h-Qf said -ejc-e«ptie«T 
whether a corresponding exception should be handled by a secure mode exception handler 
executing in a secure mode aftd-w liich of said e xceptiens-OLshould be handled by an exception 
handler executing in a mode within a current one of said secure domain and said non-secure 
domain when that exception occurs. 

12. Canceled. 

1 3 . (previously presented) A method as claimed in claim 1 1 , wherein said exception 
trap mask register is writable when said processor is in a secure mode and said exception trap 
mask register is non-writable when said processor is in a non-secure mode. 

14. (previously presented) A method as claimed in claim 11, further comprising a 
configuration controlling coprocessor associated with said processor and wherein said exception 
trap mask register is a register within said configuration controlling coprocessor. 

1 5 . (original) A method as claimed in claim 1 1 , wherein at least one of said 
parameters is a signal value provided at a hardware input to said processor. 
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16. (original) A method as claimed in claim 1 1 , wherein said secure exception 
handler is part of a secure operating system operable in said secure mode. 

17. (original) A method as claimed in claim 1 1 , wherein said non-secure exception 
handler is part of a non-secure operating system operable in said non-secure mode. 

18. (previously presented) A method as claimed in claim 11, wherein said processor 
is also operable in a monitor mode and any switching between a secure mode and a non-secure 
mode required for handling of an exception as specified by said parameters takes place via said 
monitor mode, said processor being at least partially in said monitor mode and executing a 
monitor program to manage switching between said secure mode and said non-secure mode. 

1 9. (original) A method as claimed in claim 1 8, wherein said monitor program may 
change said parameters to determine where an exception should be handled. 

20. (previously presented) A method as claimed in claim 18, wherein said processor 
includes a register bank and said monitor program flushes at least a portion of said register bank 
shared between said secure mode and said non-secure mode when switching from said secure 
mode to said non-secure mode such that no secure data held within said register bank may pass 
from said secure mode to said non-secure mode other than as permitted by said monitor program. 



-6- 



1261119 



WATT et al. 

Appl. No. 10/714,565 

October 18, 2007 

21 . (previously presented) A computer program product having a computer program 
embodied in a tangible medium and executable on a data processing apparatus to control said 
data processing apparatus in accordance with the method of claim 1 1 . 
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